# Kibana Log File not created

**URL:** <https://discuss.elastic.co/t/kibana-log-file-not-created/334099>\
**Category:** Kibana\
**Created:** [May 23, 2023, 10:02am UTC](https://discuss.elastic.co/t/kibana-log-file-not-created/334099 "2023-05-23T10:02:58Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Oriya](https://avatars.discourse-cdn.com/v4/letter/o/2bfe46/32.png) [@Oriya](https://discuss.elastic.co/u/Oriya)\
**Post date:** [May 23, 2023, 10:02am UTC](https://discuss.elastic.co/t/kibana-log-file-not-created/334099/1 "2023-05-23T10:02:58Z")

</div>

Hi,  
Recently we notice that kibana log file that should be written to the path :  
/var/log/kibana/kibana.log  
was not written for a long time.

this is the kibana.yml :

```auto
# Kibana is served by a back end server. This setting specifies the port to use.
#server.port: 5601

# Specifies the address to which the Kibana server will bind. IP addresses and host names are both valid values.
# The default is 'localhost', which usually means remote machines will not be able to connect.
# To allow connections from remote users, set this parameter to a non-loopback address.
#server.host: " ********"
server.host: " ********"

# Enables you to specify a path to mount Kibana at if you are running behind a proxy.
# Use the `server.rewriteBasePath` setting to tell Kibana if it should remove the basePath
# from requests it receives, and to prevent a deprecation warning at startup.
# This setting cannot end in a slash.
#server.basePath: ""

# Specifies whether Kibana should rewrite requests that are prefixed with
# `server.basePath` or require that they are rewritten by your reverse proxy.
# This setting was effectively always `false` before Kibana 6.3 and will
# default to `true` starting in Kibana 7.0.
#server.rewriteBasePath: false

# Specifies the public URL at which Kibana is available for end users. If
# `server.basePath` is configured this URL should end with the same basePath.
#server.publicBaseUrl: ""

# The maximum payload size in bytes for incoming server requests.
#server.maxPayloadBytes: 1048576

# The Kibana server's name. This is used for display purposes.
#server.name: "your-hostname"

# The URLs of the Elasticsearch instances to use for all your queries.

elasticsearch.hosts: [" ************************************************"]
#elasticsearch.hosts: [" ********", "********", " ********"]

# Kibana uses an index in Elasticsearch to store saved searches, visualizations and
# dashboards. Kibana creates a new index if the index doesn't already exist.
#kibana.index: ".kibana"

# The default application to load.
#kibana.defaultAppId: "home"

# If your Elasticsearch is protected with basic authentication, these settings provide
# the username and password that the Kibana server uses to perform maintenance on the Kibana
# index at startup. Your Kibana users still need to authenticate with Elasticsearch, which
# is proxied through the Kibana server.
elasticsearch.username: " ********"
elasticsearch.password: " ********"

# Enables SSL and paths to the PEM-format SSL certificate and SSL key files, respectively.
# These settings enable SSL for outgoing requests from the Kibana server to the browser.
server.ssl.enabled: true
server.ssl.certificate: " ********"
server.ssl.key: " ********"

# Optional settings that provide the paths to the PEM-format SSL certificate and key files.
# These files are used to verify the identity of Kibana to Elasticsearch and are required when
# xpack.security.http.ssl.client_authentication in Elasticsearch is set to required.
elasticsearch.ssl.certificate: " ********"
elasticsearch.ssl.key: " ********"

# Optional setting that enables you to specify a path to the PEM file for the certificate
# authority for your Elasticsearch instance.
elasticsearch.ssl.certificateAuthorities: [" ********"]

# To disregard the validity of SSL certificates, change this setting's value to 'none'.
#elasticsearch.ssl.verificationMode: full

# Time in milliseconds to wait for Elasticsearch to respond to pings. Defaults to the value of
# the elasticsearch.requestTimeout setting.
#elasticsearch.pingTimeout: 1500

# Time in milliseconds to wait for responses from the back end or Elasticsearch. This value
# must be a positive integer.
#elasticsearch.requestTimeout: 30000

# List of Kibana client-side headers to send to Elasticsearch. To send *no* client-side
# headers, set this value to [] (an empty list).
#elasticsearch.requestHeadersWhitelist: [authorization]

# Header names and values that are sent to Elasticsearch. Any custom headers cannot be overwritten
# by client-side headers, regardless of the elasticsearch.requestHeadersWhitelist configuration.
#elasticsearch.customHeaders: {}

# Time in milliseconds for Elasticsearch to wait for responses from shards. Set to 0 to disable.
#elasticsearch.shardTimeout: 30000

# Logs queries sent to Elasticsearch. Requires logging.verbose set to true.
#elasticsearch.logQueries: true

# Specifies the path where Kibana creates the process ID file.
#pid.file: /run/kibana/kibana.pid

# Enables you to specify a file where Kibana stores log output.
#logging.dest: stdout

# Set the value of this setting to true to suppress all logging output.
#logging.silent: false

# Set the value of this setting to true to suppress all logging output other than error messages.
#logging.quiet: false

# Set the value of this setting to true to log all events, including system usage information
# and all requests.
#logging.verbose: true

# Set the interval in milliseconds to sample system and process performance
# metrics. Minimum is 100ms. Defaults to 5000.
#ops.interval: 5000

# Specifies locale to be used for all localizable strings, dates and number formats.
# Supported languages are the following: English - en , by default , Chinese - zh-CN .
#i18n.locale: "en"
xpack.encryptedSavedObjects.encryptionKey: "asdfghjklqwertyuiopzxcvbnmsdfgqw"
xpack.security.loginHelp: " **Help** info with a [link](...)"
xpack.security.authc.providers:
# basic.native1:
# order: 0
# icon: "logoElasticsearch"
# hint: "Typically for administrators"
  basic.ad1:
    order: 0
    icon: "logoElasticsearch"
    hint: "Typically for administrators"
# saml.saml1:
# order: 1
# realm: saml1
# description: "Log in with SSO"
# icon: "https://my-company.xyz/saml-logo.svg"
# saml.saml2:
# order: 2
# realm: saml2
# showInSelector: false
# kerberos.kerberos1:
# order: 3
# enabled: false

monitoring.ui.ccs.enabled: false
xpack.reporting.enabled: true
xpack.reporting.csv.maxSizeBytes: 104857600
xpack.security.session.idleTimeout: "24h"
#xpack.reporting.queue.timeout : 600000

logging:
  root:
    level: info

```

how can i troubleshoot this problem ?  
Thanks!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 23, 2023, 10:02am UTC](https://discuss.elastic.co/t/kibana-log-file-not-created/334099/2 "2023-05-23T10:02:58Z")

</div>

Kibana 6.3 is [EOL](https://www.elastic.co/support/eol) and no longer supported. Please upgrade ASAP.

(This is an automated response from your friendly Elastic bot. Please report this post if you have any suggestions or concerns :elasticheart: )

---

<div class="post-metadata">

**Author:** ![Oriya](https://avatars.discourse-cdn.com/v4/letter/o/2bfe46/32.png) [@Oriya](https://discuss.elastic.co/u/Oriya)\
**Post date:** [May 23, 2023, 10:42am UTC](https://discuss.elastic.co/t/kibana-log-file-not-created/334099/3 "2023-05-23T10:42:56Z")

</div>

our kibana version is 8.1.3

---

<div class="post-metadata">

**Author:** ![Oriya](https://avatars.discourse-cdn.com/v4/letter/o/2bfe46/32.png) [@Oriya](https://discuss.elastic.co/u/Oriya)\
**Post date:** [May 23, 2023, 11:36am UTC](https://discuss.elastic.co/t/kibana-log-file-not-created/334099/4 "2023-05-23T11:36:53Z")

</div>

issue solved!  
i added in the yml file this configuration and its help :

```auto
logging:
  appenders:
    file:
      type: file
      fileName: /var/log/kibana.log
      layout:
        type: pattern
  root:
    appenders: [file]

```

> **[Examples | Kibana Guide \[8.1\] | Elastic](https://www.elastic.co/guide/en/kibana/8.1/log-settings-examples.html)**
>
> A list of the supported authentication mechanisms in Kibana.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 20, 2023, 11:37am UTC](https://discuss.elastic.co/t/kibana-log-file-not-created/334099/5 "2023-06-20T11:37:02Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.